#13108 closed enhancement (fixed)

nss-3.50

Reported by: Douglas R. Reno Owned by: Bruce Dubbs
Priority: normal Milestone: 9.1
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description

New minor version

Change History (3)

comment:1 by ken@…, 18 months ago

From https://wiki.mozilla.org/NSS:Release_Versions firefox latest will not require this until 73 has been released next week. It seems the minor versions are now expected to release a few days before firefox nightly rolls over to beta.

Release Notes from https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_Releases Notable Changes in NSS 3.50

Verified primitives from HACL* were updated, bringing performance improvements for several platforms.

Note that Intel processors with SSE4 but without AVX are currently unable to use the improved ChaCha20/Poly1305 due to a build issue; such platforms will fall-back to less optimized algorithms. See Bug 1609569 for details.

Updated DTLS 1.3 implementation to Draft-30

Bugs fixed in NSS 3.50

Bug 1599514 - Update DTLS 1.3 implementation to Draft-30

Bug 1603438 - Fix native tools build failure due to lack of zlib include dir if external

Bug 1599603 - NIST SP800-108 KBKDF - PKCS#11 implementation

Bug 1606992 - Cache the most recent PBKDF1 password hash, to speed up repeated SDR operations, important with the increased KDF iteration counts. NSS 3.49.1 sped up PBKDF2 operations, though PBKDF1 operations are also relevant for older NSS databases (also included in NSS 3.49.2)

Bug 1608895 - Gyp builds on taskcluster broken by Setuptools v45.0.0 (for lacking Python3)

Bug 1574643 - Upgrade HACL* verified implementations of ChaCha20, Poly1305, and 64-bit Curve25519

Bug 1608327 - Two problems with NEON-specific code in freebl

Bug 1575843 - Detect AArch64 CPU features on FreeBSD

Bug 1607099 - Remove the buildbot configuration

Bug 1585429 - Add more HKDF test vectors

Bug 1573911 - Add more RSA test vectors

Bug 1605314 - Compare all 8 bytes of an mp_digit when clamping in Windows assembly/mp_comba

Bug 1604596 - Update Wycheproof vectors and add support for CBC, P256-ECDH, and CMAC tests

Bug 1608493 - Use AES-NI for non-GCM AES ciphers on macOS

Bug 1547639 - Update zlib in NSS to 1.2.11

Bug 1609181 - Detect ARM (32-bit) CPU features on FreeBSD

Bug 1602386 - Fix build on FreeBSD/powerpc*

Bug 1608151 - Introduce NSS_DISABLE_ALTIVEC

Bug 1612623 - Depend on NSPR 4.25

Bug 1609673 - Fix a crash when NSS is compiled without libnssdbm support, but the nssdbm shared object is available anyway.

comment:2 by Bruce Dubbs, 18 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: newassigned

comment:3 by Bruce Dubbs, 18 months ago

Resolution: fixed
Status: assignedclosed

Fixed at revision 22643.

Note: See TracTickets for help on using tickets.